Push security is validated by a domain-based authentication algorithm. If the Push Content URL is not part of the Trusted Push Server, the Push Message is denied.